2V0-642 Dumps

Question: 20

An organization has a PCI compliant application deployed as part of a larger NSX environment. Every year a team of contractors evaluates the security of the environment and recommends changes. What NSX Role and Scope should the contractors be given to minimize access but still allow them to fulfill the stated requirement?

A. NSX Administrator, Limit access scope
B. Enterprise Administrator, Limit access scope
C. Auditor, Limit access scope
D. Security Administrator, No restrictions

Answer: B

Question: 19

Which service cannot be included in a Security Policy using Service Composer?

A. Endpoint Services
B. Firewall Rules
C. Virtual Private Network Services
D. Network Introspection Services

Answer: C

Question: 18

Which is required to support unicast mode in NSX?

A. Hardware VTEP
B. Distributed Logical Router
C. NSX Controller
D. NSX Edge

Answer: C

Question: 17

When running the NSX Control Plane in Hybrid Mode what are the minimum physical network requirements? (Choose three.)

A. MTU 1500
B. NSX Controller connectivity
C. IGMP Snooping
D. Multicast Routing with PIM
E. Unicast L3 Routing

Answer: B,C,E

Question: 16

Which term describes a situation where a bottleneck is created when traffic is sent to a single device for security enforcement?

A. security event queueing
B. hairpinning
C. security looping
D. enforcement degradation

Answer: A

Question: 15

Which load balancing algorithm is only available on a vSphere Distributed Switch?

A. Route Based on Source MAC Hash
B. Route Based on Originating Virtual Port
C. Route Based on IP Hash
D. Route Based on Physical NIC Load

Answer: D

Question: 14

How is high availability of the NSX Edge Gateway accomplished?

A. HA Application Monitoring on the Edge Gateway sends a heartbeat to the ESXi host.
B. VMware Tools on the Edge Gateway sends a heartbeat to the ESXi host.
C. The Edge appliance sends a heartbeat through an uplink interface.
D. The Edge appliance sends a heartbeat through an internal interface.

Answer: D